CVE-2025-25428: High severity Trendnet TEW-929DRU vulnerability
TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25428?
CVE-2025-25428 is classified as a critical severity vulnerability due to the presence of a hardcoded password that could allow unauthorized root access.
How do I fix CVE-2025-25428?
To mitigate CVE-2025-25428, it is essential to update to the latest firmware version provided by TRENDnet that addresses the hardcoded password issue.
What type of devices are affected by CVE-2025-25428?
CVE-2025-25428 specifically affects the TRENDnet TEW-929DRU router due to its hardcoded password vulnerability.
What actions should I take if I am using a TRENDnet TEW-929DRU?
If using a TRENDnet TEW-929DRU, immediately check for firmware updates and change any default credentials to enhance security.
Can CVE-2025-25428 lead to data breaches?
Yes, CVE-2025-25428 can potentially lead to data breaches since attackers can gain root access, allowing them to extract sensitive information.